Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/81cf6bc6-b551-3cd3-b905-c5651fbac68f.roa
File: 81cf6bc6-b551-3cd3-b905-c5651fbac68f.roa (raw, json)
Hash identifier: dGn04AU8OVAeTk5OkZqQDZpSPO8e+6liO3RnNwVDkDQ=
Subject key identifier: 5A:AD:15:9E:53:14:C7:B3:DD:B4:63:F5:38:66:6D:54:B1:7A:C2:F0
Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial: 010D0C9F432858478249CBE897217C3340CCD800
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/81cf6bc6-b551-3cd3-b905-c5651fbac68f.roa
Signing time: Fri 11 Oct 2024 19:23:44 +0000
ROA not before: Fri 11 Oct 2024 19:23:44 +0000
ROA not after: Thu 09 Jan 2025 20:23:44 +0000
asID: 40065
IP address blocks: 67.220.64.0/24 maxlen: 24
67.220.90.0/24 maxlen: 24
67.220.91.0/24 maxlen: 24
67.220.92.0/24 maxlen: 24
67.220.93.0/24 maxlen: 24
68.168.16.0/23 maxlen: 24
68.168.18.0/23 maxlen: 24
68.168.20.0/22 maxlen: 24
68.168.24.0/22 maxlen: 24
68.168.28.0/23 maxlen: 24
68.168.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:82:49:cb:e8:97:21:7c:33:40:cc:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
Validity
Not Before: Oct 11 19:23:44 2024 GMT
Not After : Jan 9 20:23:44 2025 GMT
Subject: CN=e51bb5ed-db33-4d8e-adad-54b5acc63466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:81:57:08:79:29:ef:37:83:4e:64:5f:4c:
70:f7:46:15:56:2e:a8:0c:8c:d4:1c:0a:b9:c6:1c:
ac:fc:7f:f3:e1:b0:d2:32:f0:c5:00:03:86:cf:ec:
9d:89:68:79:16:f0:79:f3:20:75:a7:16:e5:26:01:
ca:fb:e1:0d:81:34:cd:e6:d3:a5:32:75:c2:13:92:
18:79:1a:c8:ba:4d:f0:ef:8a:ad:c0:7b:c0:62:19:
92:de:50:89:ac:e0:d3:c5:63:cc:f1:00:60:9d:7f:
ba:ef:16:17:6b:58:69:fb:44:5c:42:f7:03:0d:6d:
a6:49:d0:58:54:40:f5:c3:46:2d:d7:f4:eb:c6:ad:
5c:ce:95:48:f1:4c:3a:98:12:23:7f:4f:43:1b:b7:
15:76:a8:1e:d9:71:c7:81:14:4d:22:5f:d5:52:e1:
d4:03:11:31:4e:26:92:c4:88:76:8c:79:13:04:26:
2a:1f:57:50:74:ac:c1:26:38:e6:e1:d7:ac:2b:c1:
e6:40:27:91:38:f9:aa:18:1c:e5:66:93:b8:73:7e:
83:85:d7:22:b0:31:e9:9b:0e:8c:b0:0a:3b:be:f8:
cd:92:31:b1:c5:0c:da:5d:a1:8b:87:bb:cd:1f:51:
7c:50:81:d9:a4:98:a0:a1:30:dc:1c:99:9b:05:cc:
a8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AD:15:9E:53:14:C7:B3:DD:B4:63:F5:38:66:6D:54:B1:7A:C2:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/81cf6bc6-b551-3cd3-b905-c5651fbac68f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
X509v3 Authority Key Identifier:
keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
sbgp-ipAddrBlock: critical
IPv4:
67.220.64.0/24
67.220.90.0-67.220.93.255
68.168.16.0-68.168.30.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:a1:19:77:cc:83:46:39:d6:71:39:d2:7b:1e:cf:44:07:f6:
1a:2c:5a:a9:a6:ef:31:30:3a:f5:ad:74:55:b7:3d:d1:c2:14:
8d:28:01:39:43:b3:8f:ae:61:e1:7b:01:60:2c:b2:ea:e8:d6:
36:4c:0c:aa:f5:8a:d2:46:e5:83:60:f1:35:f3:ad:d9:a3:4f:
7c:8c:10:e0:a1:a5:a2:68:07:2c:24:d5:c8:ff:48:a4:97:a9:
d9:db:3d:40:9e:9a:c2:51:cd:46:46:84:55:43:00:3b:33:6f:
0e:0d:72:99:8c:bc:61:7b:94:93:10:fc:97:c8:9f:9f:2b:61:
7f:f2:d6:b1:b3:59:a0:1f:d5:72:ea:bb:17:b8:41:29:e2:3f:
38:6b:f8:09:b1:93:9f:0c:80:ca:b2:1c:c7:70:bd:ca:ad:19:
af:77:ff:91:55:a2:62:8d:3f:98:cb:4e:5c:de:56:1b:e9:85:
9a:b8:3c:60:d9:8c:fd:fa:1b:80:01:b0:70:fe:1b:00:8b:e1:
cd:ff:3b:e5:b0:a9:57:1d:31:1f:9a:40:59:4a:2e:ad:f9:f9:
d8:7e:c4:74:82:57:c1:e6:18:6d:57:d2:33:33:5a:a3:a9:c6:
8e:9e:76:08:c4:10:79:7d:a9:81:31:c5:de:f1:71:16:03:10:
82:d9:3e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:24:44 2025 by rpki-client